This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File:                     WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier:          15JLF2qNXcqFxLDvEnm9c99jwj47WkdsQQXa9Gupl4Y=
Subject key identifier:   7C:F2:FD:4B:F4:3A:6C:E0:C0:8F:E0:72:C0:93:59:DC:3C:9B:A9:23
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer:       /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial:       019BF6512567798ABDFBFB50F4951976AF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 18:01:11 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:11 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:11 +0000
Files and hashes:         1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: 0p1Sg0ZtvMuwCWyHUMQo10dYg/BxmzzzNgZwCJ+YqZA=)
                          2: mlSBu9TMzRv1cMksxUNnCbKCFl0.roa (hash: 2BjuTtcqQP3+XgVLMLJcS2zD2YXPkZIw27QDfsAhCoI=)
                          3: q8bxI4KwUJabKAhcIRxGXIBY40U.roa (hash: ptYSizJNQ3Kc8/zLMIQuVYyw+eoexSAPxfZlEWXvP/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:25:67:79:8a:bd:fb:fb:50:f4:95:19:76:af:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
        Validity
            Not Before: Jan 25 18:01:11 2026 GMT
            Not After : Jan 26 18:01:11 2026 GMT
        Subject: CN=7cf2fd4bf43a6ce0c08fe072c09359dc3c9ba923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:7b:ba:d5:43:6d:d1:06:71:ad:fa:13:1c:
                    10:9e:fc:a3:b5:d3:0b:f4:98:48:37:32:6e:f7:e8:
                    75:12:7b:28:51:e1:99:f7:04:78:49:1f:58:14:a8:
                    d7:d5:3b:76:77:73:8c:82:d7:f3:62:3f:b3:6a:76:
                    77:e1:1a:7d:1e:22:d2:d8:3f:a8:7d:6c:4f:5b:19:
                    f9:7d:ae:17:f0:69:35:a1:d2:b9:bf:b2:6a:df:3d:
                    d2:4c:4a:eb:6e:9b:36:46:74:4d:8b:19:69:21:72:
                    50:53:20:0a:fc:3a:0b:39:2e:c1:2e:89:65:d6:cd:
                    3d:9f:31:f6:6d:6b:df:1e:b0:3d:c2:4d:db:13:76:
                    81:ef:be:02:58:39:73:53:b6:05:61:dc:0b:c6:3e:
                    bd:ad:d2:10:00:3f:e8:c4:69:41:0f:bc:d6:89:c4:
                    f9:e7:1e:5a:52:90:7f:7c:e8:a4:24:3b:12:4f:ec:
                    b1:dc:78:b6:10:0a:a4:64:9d:a1:d8:4d:8e:0f:cd:
                    93:c5:d7:34:bc:2b:6f:79:70:ce:bc:65:e2:b7:1f:
                    bc:6a:df:12:66:f8:cf:b1:e3:7c:f5:77:a7:e9:8a:
                    30:3b:ff:4d:05:eb:ef:e9:da:5d:73:7f:09:5f:cd:
                    02:0d:35:01:41:34:2c:89:6a:86:b0:f5:f2:58:ce:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F2:FD:4B:F4:3A:6C:E0:C0:8F:E0:72:C0:93:59:DC:3C:9B:A9:23
            X509v3 Authority Key Identifier:
                keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:19:bb:fe:80:48:d6:20:9c:10:0c:e4:a7:82:52:e0:34:9f:
         0e:8e:f3:fa:10:a8:dd:40:fb:29:9d:ba:9d:71:ee:08:0c:a6:
         c7:13:bd:7f:95:12:c1:e8:32:28:d3:a6:ee:1b:86:c5:7e:53:
         83:4e:f9:b0:d5:e8:8c:93:6c:be:b0:98:fb:6f:bb:ba:85:85:
         b9:6e:06:57:a7:e0:e1:3d:90:fd:ee:f9:9e:9c:cf:3c:1f:b2:
         7c:0c:d8:66:b4:09:10:c1:bb:db:a6:f9:c5:d1:a1:bb:e2:3f:
         6f:7e:51:d7:f1:40:ca:2b:c1:09:6f:4b:f6:54:14:c3:dd:65:
         a4:ab:53:fd:ad:ad:f1:20:d2:27:dd:a9:00:75:40:53:2c:64:
         55:0e:59:2a:d6:51:83:72:12:c2:82:03:2b:aa:ec:9a:63:d1:
         63:82:1b:0b:43:18:68:99:c1:22:0b:aa:a6:16:1c:e2:dc:4d:
         0e:54:9f:11:85:7c:cf:eb:37:b2:eb:dc:2b:3c:b7:ea:2c:d5:
         e9:4e:98:9f:c2:65:ef:e4:27:62:81:05:01:8f:d8:13:d6:57:
         d2:dd:1b:0b:3b:db:ed:ef:f9:f4:8b:82:bd:02:7c:3f:85:ba:
         3a:39:16:30:35:13:89:eb:ea:a9:0c:a7:4e:92:2d:97:b5:65:
         86:24:e8:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2USVneYq9+/tQ9JUZdq+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNTI5NDVkMjMxZjVmOGE5NzRiZTcxMmU4NzE4YWI1MGYw
NGNmZmEwHhcNMjYwMTI1MTgwMTExWhcNMjYwMTI2MTgwMTExWjAzMTEwLwYDVQQD
Eyg3Y2YyZmQ0YmY0M2E2Y2UwYzA4ZmUwNzJjMDkzNTlkYzNjOWJhOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p97utVDbdEGca36ExwQnvyjtdML
9JhINzJu9+h1EnsoUeGZ9wR4SR9YFKjX1Tt2d3OMgtfzYj+zanZ34Rp9HiLS2D+o
fWxPWxn5fa4X8Gk1odK5v7Jq3z3STErrbps2RnRNixlpIXJQUyAK/DoLOS7BLoll
1s09nzH2bWvfHrA9wk3bE3aB774CWDlzU7YFYdwLxj69rdIQAD/oxGlBD7zWicT5
5x5aUpB/fOikJDsST+yx3Hi2EAqkZJ2h2E2OD82Txdc0vCtveXDOvGXitx+8at8S
ZvjPseN89Xen6YowO/9NBevv6dpdc38JX80CDTUBQTQsiWqGsPXyWM4I0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzy/Uv0OmzgwI/gcsCTWdw8m6kjMB8GA1UdIwQY
MBaAFFpSlF0jH1+Kl0vnEuhxirUPBM/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEt
MmU0MWZmM2UwYTZmLzEvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEtMmU0MWZmM2UwYTZm
LzEvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRm7/oBI
1iCcEAzkp4JS4DSfDo7z+hCo3UD7KZ26nXHuCAymxxO9f5USwegyKNOm7huGxX5T
g075sNXojJNsvrCY+2+7uoWFuW4GV6fg4T2Q/e75npzPPB+yfAzYZrQJEMG726b5
xdGhu+I/b35R1/FAyivBCW9L9lQUw91lpKtT/a2t8SDSJ92pAHVAUyxkVQ5ZKtZR
g3ISwoIDK6rsmmPRY4IbC0MYaJnBIguqphYc4txNDlSfEYV8z+s3suvcKzy36izV
6U6Yn8Jl7+QnYoEFAY/YE9ZX0t0bCzvb7e/59IuCvQJ8P4W6OjkWMDUTievqqQyn
TpItl7VlhiTowg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:02:35 2026 by rpki-client